CVSS base score
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
What the vulnerability does
wpForo 2.4.14 contains an unauthenticated SQL injection vulnerability in Topics::get_topics() where the ORDER BY clause relies on ineffective esc_sql() sanitization on unquoted identifiers. Attackers exploit the wpfob parameter with CASE WHEN payloads to perform blind boolean extraction of credentials from the WordPress database.
Explanation of Vulnerability in Simple Terms
wpForo Forum versions 2.4 through 2.4.14 contain a SQL injection vulnerability in database query handling. An attacker can craft malicious input to execute arbitrary SQL commands and read sensitive data from the forum database, including user credentials and private messages. Update to version 2.4.15 or later to patch this vulnerability.
What an attacker can do
Execute SQL commands to read or modify forum database contents, including user data and private messages.
Potential impact on your site
Forum user accounts, passwords, and private messages can be compromised without warning or user action.
Conditions required to exploit
Network access to the forum; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
